[Snort-sigs] SO rules vs regular rules

Mike Cox mike.cox52 at ...2420...
Thu Jan 14 15:10:47 EST 2010


Lately I have considered taking some of the poorer performing snort
rules and making them shared object rules.  The purpose of this would
be to improve performance but my question is, will it?  Are there any
performance metrics associated with SO rules vs regular rules?

Thanks.

-Mike Cox




More information about the Snort-sigs mailing list